Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgPctmbdIk2RQp8zx2n66_qVHQQ.cer
File:                     fgPctmbdIk2RQp8zx2n66_qVHQQ.cer (raw, json)
Hash identifier:          s+ZXzntqaZ70fuEs9o7a4Yer6cT8zZStz6ktnTYCd5I=
Subject key identifier:   7E:03:DC:B6:66:DD:22:4D:91:42:9F:33:C7:69:FA:EB:FA:95:1D:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B7397D9469D6750846A58F94344F11
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/fgPctmbdIk2RQp8zx2n66_qVHQQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:14 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 178.211.157.0/24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 13:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:39:7d:94:69:d6:75:08:46:a5:8f:94:34:4f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7e03dcb666dd224d91429f33c769faebfa951d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:79:c6:27:e2:bd:38:28:b0:b9:28:4f:17:
                    2a:56:bb:e5:a5:ac:dd:2c:27:87:13:47:12:cc:08:
                    e0:9a:5e:b8:49:d2:e9:f7:a1:c7:ad:d9:c9:3c:39:
                    85:6e:67:09:02:ac:43:7a:dc:33:fc:15:19:46:62:
                    b1:e6:25:89:f4:84:eb:39:6f:2b:b4:10:c8:5d:1f:
                    de:21:e9:3d:1a:94:f4:71:8a:a5:40:11:ed:34:1b:
                    df:05:8c:ba:25:35:d1:e7:50:23:b7:b4:fe:6e:e9:
                    bc:77:9e:52:96:52:f5:85:a8:be:bf:dd:c9:0c:55:
                    cc:50:a1:f7:3b:3d:94:1a:25:ed:68:18:32:13:1e:
                    0c:06:96:d0:13:b2:a3:75:60:c6:78:b2:97:64:20:
                    ec:a6:21:dd:27:c6:a6:a3:56:c8:d9:79:fb:e0:3b:
                    77:20:10:46:21:0a:b3:dd:0d:a3:cd:6c:f8:b1:9c:
                    45:a0:42:47:b6:ab:4c:90:47:ae:94:08:35:b6:53:
                    43:0a:24:91:6a:85:e0:ce:3a:59:78:b4:48:fb:a6:
                    24:14:ac:c8:9e:2c:15:eb:b2:dd:85:02:9b:c2:59:
                    88:0e:84:dd:d8:1d:00:2e:43:35:79:42:6a:bf:8c:
                    79:f0:a3:00:16:af:37:56:0e:8b:ca:20:0d:39:05:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:DC:B6:66:DD:22:4D:91:42:9F:33:C7:69:FA:EB:FA:95:1D:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/fgPctmbdIk2RQp8zx2n66_qVHQQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:2e:34:fc:9f:23:95:9d:45:1c:80:5c:0b:8c:b4:cd:7c:
         62:39:5b:f4:17:92:0e:8c:b6:b2:19:fa:cb:85:94:74:c6:96:
         30:31:68:18:23:c8:6e:dc:ef:9d:c0:69:b5:57:c1:d8:33:22:
         dd:09:ce:eb:e6:ca:f9:0d:1d:6e:f7:ff:86:f3:cc:9f:ac:95:
         89:7b:3a:d1:3b:37:fc:58:5c:4d:f0:51:07:84:6b:13:3f:35:
         33:6a:4b:86:bf:62:4e:87:d3:68:93:c3:6f:5c:ed:e8:3b:10:
         9d:b5:43:19:53:b3:f2:ec:df:76:49:bd:c1:d6:0c:a1:de:e3:
         73:13:98:83:b9:6a:60:fb:30:eb:77:d5:cd:14:b5:39:bd:3f:
         4b:bb:52:0f:7d:4d:b4:0f:1c:d4:18:39:fd:4a:63:26:79:e3:
         b0:87:99:a9:60:df:1a:3c:9e:d0:ac:12:94:5b:d8:88:ce:b6:
         1d:54:4c:c9:fb:af:d8:d0:ae:19:6c:0d:17:e2:d7:b8:79:91:
         d5:6d:66:6b:5e:83:dd:51:d7:e3:d8:4b:96:cd:8d:c8:79:23:
         46:67:02:c8:ee:a4:68:24:4d:07:29:24:fc:8e:82:6c:ce:87:
         0f:1d:cc:58:2f:f7:06:d3:5f:5f:2b:53:65:04:fd:3d:2b:34:
         cc:4f:63:a1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDtzl9lGnWdQhGpY+UNE8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTAzZGNiNjY2ZGQyMjRkOTE0MjlmMzNjNzY5ZmFlYmZhOTUxZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fZ5xifivTgosLkoTxcqVrvlpazd
LCeHE0cSzAjgml64SdLp96HHrdnJPDmFbmcJAqxDetwz/BUZRmKx5iWJ9ITrOW8r
tBDIXR/eIek9GpT0cYqlQBHtNBvfBYy6JTXR51Ajt7T+bum8d55SllL1hai+v93J
DFXMUKH3Oz2UGiXtaBgyEx4MBpbQE7KjdWDGeLKXZCDspiHdJ8amo1bI2Xn74Dt3
IBBGIQqz3Q2jzWz4sZxFoEJHtqtMkEeulAg1tlNDCiSRaoXgzjpZeLRI+6YkFKzI
niwV67LdhQKbwlmIDoTd2B0ALkM1eUJqv4x58KMAFq83Vg6LyiANOQUXjwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH4D3LZm3SJNkUKfM8dp+uv6lR0EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzAzYjhi
NC1mZDlkLTRmZGQtYWRjYi00MzczZTljYTk3MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMDNiOGI0
LWZkOWQtNGZkZC1hZGNiLTQzNzNlOWNhOTcwNC8xL2ZnUGN0bWJkSWsyUlFwOHp4
Mm42Nl9xVkhRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAstOdMA0GCSqGSIb3DQEBCwUAA4IBAQAluy40
/J8jlZ1FHIBcC4y0zXxiOVv0F5IOjLayGfrLhZR0xpYwMWgYI8hu3O+dwGm1V8HY
MyLdCc7r5sr5DR1u9/+G88yfrJWJezrROzf8WFxN8FEHhGsTPzUzakuGv2JOh9No
k8NvXO3oOxCdtUMZU7Py7N92Sb3B1gyh3uNzE5iDuWpg+zDrd9XNFLU5vT9Lu1IP
fU20DxzUGDn9SmMmeeOwh5mpYN8aPJ7QrBKUW9iIzrYdVEzJ+6/Y0K4ZbA0X4te4
eZHVbWZrXoPdUdfj2EuWzY3IeSNGZwLI7qRoJE0HKST8joJszocPHcxYL/cG019f
K1NlBP09KzTMT2Oh
-----END CERTIFICATE-----